Include vulnerability assessments on dependencies